tilemap-ruletile-createfromsegment
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implementation focuses exclusively on Unity asset management and sprite analysis. All C# scripts (TilemapRuleTileCreateFromSegment.cs, RuleTileGenerator.cs, and ManualWorkflowExample.cs) use standard Unity framework classes such as Sprite, RuleTile, and AssetDatabase.
- [DATA_EXPOSURE_AND_EXFILTRATION]: There are no network operations, such as curl, wget, or HTTP requests, and no attempts to access sensitive system files like SSH keys or environment variables. The skill operates entirely within the local Unity project context.
- [COMMAND_EXECUTION]: The skill does not invoke any shell commands or external processes. All logic is handled internally through compiled C# code and standard Unity APIs.
- [DYNAMIC_EXECUTION]: No usage of unsafe deserialization (e.g., BinaryFormatter) or dynamic code execution (e.g., eval or reflection-based execution of untrusted strings) was detected. The pattern parsing logic in ParsePattern() uses strict string splitting and index validation.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests text patterns from another skill (sprite-segment-3x3grid), it employs strict schema validation. The ParsePattern method enforces a specific 3x3 grid format and throws an ArgumentException if the data does not conform, effectively sanitizing the input against malformed or injected instructions.
Audit Metadata